Stories
Slash Boxes
Comments

SoylentNews is people

posted by martyb on Thursday March 26 2020, @03:24AM   Printer-friendly
from the secret-code dept.

AMD Uses DMCA to Mitigate Massive GPU Source Code Leak (Updated) (archive) (2)

AMD has filed at least two DMCA notices against Github repos that carried "stolen" source code relating to AMD's Navi and Arden GPUs, the latter being the processor for the upcoming Xbox Series X. The person claiming responsibility for the leak informs TorrentFreak that if they doesn't get a buyer for the remainder of the code, they will dump the whole lot online.

[...] In a DMCA notice sent to development platform Github, AMD identified the recently-created 'xxXsoullessXxx' repository and a project titled "AMD-navi-GPU-HARDWARE-SOURCE" as the location of its "stolen" intellectual property.

"This repository contains intellectual property owned by and stolen from AMD," the semiconductor company wrote. "The original IP is held privately and was stolen from AMD."

Github responded by immediately taking the repository down, as per AMD's request. That prompted us to try and find the person behind the repo and to ask some questions about what AMD was trying to suppress. The individual informed TorrentFreak that AMD's GPU source code was the content in question.

The seller was reportedly looking for $100 million. AMD called the information "test files" and says that "the stolen graphics IP is not core to the competitiveness or security of our graphics products".

Also at TechRadar and Tom's Hardware.


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 0) by Anonymous Coward on Thursday March 26 2020, @03:29PM (1 child)

    by Anonymous Coward on Thursday March 26 2020, @03:29PM (#975918)

    So let's assume this is the Verilog or equivalent for the entire chip. What are you going to do with it?

    1) China (or Russia, Israel, or country of choice) uses these and starts up a local domestic competing product. The US is already complaining about "forced technology transfer." This is almost as bad, and would jump-start a new industry by decades.
    2) Organized crime now searches the source for exploitable bugs. Or worse, it leaks out and becomes script-kiddy fodder.
    3) The FBI and other security groups now has "a plausible explanation" about why they should be able to crack into computers. They can use is as cover for Parallel Construction [wikipedia.org]

    That's not even considering how The Ministry of State Security [wikipedia.org] (or FSB [wikipedia.org], DPSD [wikipedia.org], or intelligence agency of choice) uses their state-level resources to examine the source to find exploitable bugs. That's more macroscopic The Great Game [wikipedia.org] style things which has very real effects on international geopolitical things, but is so far removed from individual experiences that most people can't grok it.

    So yes, this actually does have an impact to you and your life. Maybe not as much as a 0-day exploit of Windows, but it should be more than a "meh."

  • (Score: 2) by KilroySmith on Friday March 27 2020, @03:50PM

    by KilroySmith (2113) on Friday March 27 2020, @03:50PM (#976350)

    1) was covered in my comments about "a company in a less-IP-friendly nation". They won't be able to sell it outside their borders, and will be almost as far behind as if they started from scratch. Do you really believe that it would take India, China, or Russia "decades" to build a modern GPU from scratch? Have you ever been involved in a chip design? Didn't think so.
    2) Noted in my comments about a "hacker". So what exploitable bugs do you expect my GPU to have?
    3) I have no idea what point you're trying to make here. What's the link between the FBI and Verilog?

    As far as state-level intelligence agencies - you aren't suggesting that none of those are capable of accessing the design source if they desired are you?

    So, yeah, still 'meh' to me.